CVE-2021-45915

Description

In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator.

Primary references

• cve@mitre.org — Not Applicable
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Product, Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Product, Release Notes, Vendor Advisory